Base: Improve handling of invalid CN.

Improves the case where a users IdP is providing invalid data
by allowing the Subject record to be created but highlight in its
output that something is incorrect.

References #120.
Merge pull request #120 from ausaccessfed/bugfix/#120-invalid-cn-existing-account-breaks

Invalid CN triggers auth failure